Purchase Order pdf[.]rar | Triage

Sharing

General

Target

Purchase Order pdf.rar
Size

630KB
MD5

afd804c312383cb891f4a7156f692b12
SHA1

bfd9a10b4759beb35d187c6477e89844f8d3dc89
SHA256

7288664c9fe4142317ca1d56027778acd173473339be7c93876307ff6814c054
SHA512

c14dd4999f5c803232e2d18c59523c79bf5f8ccd28d61d608f04e54cd52fe1b836baa1ab54b561ce8b37a0ed01f3b107be0f7ebaab6b44fc4be113fc732f37d4
SSDEEP

12288:c75Z0yuY6vpKknB0hQYyrUzfQ94Zvx3dw3BQTP255C7PprCmUOLEN7LrZka0KV6:c3FgxB0XyrU094ZvJdw3BQ72vSBmrNDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Purchase Order pdf.exe

Files

Purchase Order pdf.rar
.rar
Purchase Order pdf.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ